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Page 9, line 14: Please rewrite "CERTdm" -OMCdm- 

Page 9r1ine Sofpiease rewrite "user's public key Keyu*P" as -postage meter 
public key KeyoM*P--. 

Page 1 0ffline 21 : Please rewrite "CERTdm" - OMC D m- 

Page 10, Itrte 23: Please rewrite "CERTdm" -OMCdm- 

Page 11, line 16: Please rewrite "CERTdm" - OMCdm--- 

Page Upline 18: Please rewrite "CERTdm" - OMCdm-- 

Page Ififline'sf After "Value" please insert -, IAV D m ,-- 

Page 16, line 6: Please delete "IAV D m". 

Page 18, line 1: Please rewrite "6" as -8-. 

Page f8, line 1: After "Value" please insert -, IAV 6 o,~ 

Page laTline 2: Please delete "IAV 5 o". 

Pag^l, line 25: After "where" please rewrite "K" as --K(p)--. 



.Bagel2, line 3: Please rewrite "Key M H(e,IAV)" as --(KeyDMH (e, I AV) 



Pag e 22, Ijne 4yftlease rewrite "Keyw" as - Keypw-. 
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Page 22, line 9: Please rewrite "Key M *P" as - Key D M*P-. 
-£aqa22Tlineyr^Please rewrite "Key u H (e.lAV)*P" as ^ Keyn»H(e.lAV)*P- 



Page 22^}\ne^\ Please rewrite both occurrences of "KeyM *P" as -- Keyoi/P- 



Page 22, line 13: Please rewrite "Key M " as - Keyowi-. 



Page 22, line 26: Please rewrite "Key M *P" as Key D M*P- 



IN THE CLAIMS: 



Please cancel claim 1 without prejudice and substitute therefore claim 14 as 




A method for controlling, and distributing information between a digital 
meter and a certifying station operated by a^ertifying authority CA for 



publishing information, so that a public key Keyoi/P of said digital postage meter can 
e determined by a party seeking to verify indicia printed by said digital postage 



meter from said published information with^assy 
has been certified by said certifying authority 
of: 




that said public key Key D M*P 
method comprising the steps 



a) defining and publishing a finite group [P] with a binary operation [+] and 
publishing a particular point P in said group; 
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b) defining and publishing a binary operation K*p, where K is an integer and p 
is a point in said group, such that K*p is a point in said group computed by applying 
said operation [+] to K copies of said point p, and commutation of K from knowledge 
of the definition of said group [P], said point p, and Krp is hard; 



c) controlling a certifying station to publish a certificate OMCdm for said digital 
postage meter, wherein; 

OMCdm = (rDM+ tca)*P; and wherein 
r D M is a random integer generated by saicr digital postage meter and r C A is a random 
integer generated by said certifying station; 



d) controlling said certifying/station to publish a message M; 



e) controlling said certifying station to generate an integer I D m , and send said 

integer to said digital postage meter, wherein; 

/ 

Idm = r C A+ H(M)Key C A; and wherein , 
H(M) is an integer derived from said messag^ M in accordance with a publicly known 
algorithm H and KeycA^s a private key/of said certifying authority CA; 



f) publishing a public key KeycA 1 




certifying authority CA; and 



g) controlling said digital postage meter to compute a private key Keyowi, 
/Key D M = r DM + Idm = r D M + r C A+ H(M)Key C A; and 



h) controlling said digital postage meter to print an indicium and digitally sign 
said indicium with said key Key D M; whereby 



i) said verifying party can compute said user's public key KeyDM*P as 
Key DM *P = OMCdm + H(M) Key CA *P = 
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Or 



(rDM+rc A rP + H(M)KeycA*P 
from knowledge of H, M, [P], said public key KeycA*P, and OMCdm- 




Claim 



tX line-tTPI 



Please rewrite "1" as -14--. 




Claim 5, line 1: Please rewrite "1" as --14- 



Please amend claim 6 as follows: 



6. (amended) A method a^de^cfibed in claim 1 wherein said message M 
inoTudes information tying s^id-tuser's] postage meter's public key [Keyu*P] KevnM*P 
to said information 



aim i^wi* 



Please cancel claim 8 without prejudice and substitute therefore claim 15 as 



follows: 




yd. A method for controlling a digital postage meter to print indicia signed 
with a private key Key D wi based upon a published a finite group [P] with a binary 
operation [+] and a published particular point'P in said group and a published a 
binary operation K*p, where K is an integer and rflk a point'in said group, such that 
K*p is a point in said jjroup computed/iDy applying said operation [+] to K copies of 
said point p, and computation of iCfrom knowle^ge^ffhe definition of said group [P], 
said point p, and K*p is hard, so^hat a public key KeyoM*P of said digital postage 

meter can be determined by/aparty seeking to verify indicia printed by said digital 

/ 

postage meter from published information with assurance that said public key 
KeyDM*P has been cejtified by a certifying authority CA, said method comprising the 
steps of: 
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a) controlling said digital postage meter to generate a randorr/number r D M and 
send a point r D M*P to a certifying station; 

b) controlling said digital postage meter to receive a certificate OMC D m from a 
certifying station operated by said certifying authority CA^herein; 

OMCdm = (rDM + Tca)*P; and wherein / 
r D M is a random integer generated by said digital postage meter and r C A is a random 
integer generated by said certifying station; 




c) controlling said digital postage meter to receive an integer I D m from said 
certifying station, wherein; ^ 

Idm = rcA+ H(M)KeycA; and'wherein 
M is a message published by said certifying station and H(M) is an integer derived 
from said message M in accordance with a publicly known algorithm H and KeycA is 
a private key of said certifying authority CA; 



d) controlling said digital postage 



Key dm - Tdm/+ Idm - Tdm + r< 




ute a private key Key D M, 
eycA; and 



e) controlling said digital postage meter to print an indicium and digitally sign 
said indicium with said key Key D M; whereby 



f) said verifying party can compute said digital postage meter public key 
Key DM *P as / 

/KeyDM* P = OMCdm + H(M) Key CA *P = 
/ (rDM+rcA)*P + H(M)KeycA*P 
from knowledge of H, M, [P], said public key KeycA*P, and OMCdm- 



/ 
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Please cancel claim 9 without preh^ics^lT^substitute therefore' claim 16 
follows: / / 



as 



A method for controlling a certifying station operated by a certifying 
authority CA to publish information relating to a digital postage meter for printing 
indicia signed with a private key Key D M based upon a published a finite group [P] with 
a binary operation [+] and a published particular pointP in said group and a 
published a binary operation K*P, where K is an integer and p is a point in said 
group, such that K*p is a point in said group computed by applying said operation [+] 
to K copies of said point p, and computation om from knowledge of the definition of 
said group [P], said point p, and K*p isjiard/so that a public key Key D M*P of said 
digital postage meter can be determinedly a partyS^king to/verify indicia printed by 
said digital postage meter from said published information with assurance that said 
public key KeyoM*P has been certifiejrby a certifying authority CA, said method 
comprising the steps of: 



a) controlling said certifying station to receive a point r D M*P from said digital 
postage meter, where r D M is /random number generated by said digital postage 
meter; 



b) controlling said certifying station to generate and send to said digital 
postage meter a certificate OMCdm, wherein; 

OMC6 M = (r D M+ Tca)*P; and wherein 
r C A is a random integer generated by said certifying station; 



c) controlling said certifying station to generate and send to said digital 
postage m^ter an integer I D m, wherein; 

Idm = tca + H(M)KeycA; and wherein 



36 



a 



M is a message published by said certifying station and H(M) is an integer derived 
from said message M in accordance with a publicly known algorithm hf/and Key C A is 
a private key of said certifying authority CA; whereby 

d) said digital postage meter can compute said private^ey Keyowi, 

Key D M = r DM + Idm = r DM + r CA + H(M)Keyc A: and 

7 

and digitally sign said indicium with said key KeyoMl and whereby 

e) said verifying party can compute said digital postage meter public key 
Key D M*P as / 

Key dm* P = OMCdm + H(M) Key CA *P = 
(rDM+rcArP + H(M)KeycA^ 
$1 k from knowledge of H, M, [P], said public key Key C A*P, ^nd CERT D m- 

(Please add claims \*f- 301as^llows) 

* / 

yf. A method for controlling, and distributing information among a user 
station, a digital postage meter and a certifying station operated by a certifying 
authority CA for publishing information, so that a public key Key 50 *P of said digital 
postage meter can be^etermined by a party seeking to verify indicia printed by said 
digital postage metefrfrom said published information with assurance that said public 
key Key 5 o*P has been certified by said certifying authority CA, said method 
comprising the,steps of: 

a) demning and publishing a finite group [P] with a binary operation [+] and 
publishing a particular point P in said group; 

/b) defining and publishing a binary operation K*p, where K is an integer and p 
is a point in said group, such that K*p is a point in said group computed by applying 



a 
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said operation [+] to K copies of said point p, and computationof K from knowledge 
of the definition of said group [P], said point p, and K*p is ha^; 

c) controlling a certifying station to publish a certificate OMC50 for said digital 
postage meter, wherein; 

OMC50 = (r 50 + rcA)*P; and wherein 
r 50 is a random integer generated by said digital p6stage meter and r C A is a random 
integer generated by said certifying station; 

d) controlling said certifying station/to publish a message M; 



e) controlling said certifying station to generate an integer l 50 , and send said 
integer to said user station , wherejfi 

Uo = Tca + H(M)Keyo^ ; arid wher^tf 
H(M) is an integer derived fronVsaid message M in accordance with a publicly known 
algorithm H and KeycA is a private key of said certifying authority CA; 



f) publishing a pubWc key KeycA*P for said certifying authority CA; and 

g) controlling aaid user station to compute a private key Key 5 o, 

Key 5 o,£ r 5 o+ I50 = rso + tca+ H(M)KeycA; and 

h) transmitting said key Key 5 oto said postage meter; whereby 

i) said/digital postage meter can print an indicium and digitally sign said 
indicium with said key Key 5 o; and whereby 



i/said verifying party can compute said user's public key Key 5 o*P as 
Key 60 *P = OMC50 + H(M) Key CA *P = 



a 
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(r5o+rcA)*P + H(M)KeycA*P / 
from knowledge of H, M, [P], said public key KeycA*P, and OMC50. / 

n t<t / 

A method as described in claim w wherein said publicly known manner 
for deriving an integer from said published information comprises applying a hashing 
function to said message M. 

Ijp. A method as described in claim Iff wherein said message M includes 
information IAV identifying said digital postage meter and operating parameters 
applicable to said digital postage meter. / 

$0. A method as described in claim 1/ wherein said message M includes 
information IAV identifying said digital postage meter and operating parameters 
applicable to said digital postage meter. 

/ 




f\. A method as described in claim li^wfferein said g roup [ P] is defined on 
an elliptic curve. f 

2^. A method as described in claim y wherein said message M includes 
information tying said postage meter's public key Keyso*P to said information IAV. 

K / 

2(8. A method for controlling a certifying station operated by a certifying 
authority CA to publish information relating to a digital postage meter for printing 
indicia signed,with a private key Key 5 o based upon a published a finite group [P] with 
a binary operation [+] and a published particular point P in said group and a 
published^ binary operation K*p, where K is an integer and p is a point in said group, 
such that K*p is a point in said group computed by applying said operation [+] to K 
copies^f said point p, and computation of K from knowledge of the definition of said 
group [P], said point p, and K*p is hard, so that a public key Key D M*P of said digital 
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postage meter can be determined by a party seeking to verify indicia printed by said 
digital postage meter from said published information with assurance that^aid public 
key Keyoi/P has been certified by a certifying authority CA, said methpa comprising 
the steps of: 

a). controlling said certifying station to receive a point j#m*P from a user station, 
where r D M is a random number generated by said user station; 



b) controlling said certifying station to generate and send to said user station a 
certificate OMC 50 , wherein; 

OMC50 = (rso+ Tca)*P; and wherefri 
r C A is a random integer generated by said certifying : 




c) controlling said certifying station to generate and send to said user station 
an integer I50, wherein; 

I50 = rcA+ H(M)Key6A; and wherein 
M is a message published bj/said certifying station and H(M) is an integer derived 
from said message M in accordance with a publicly known algorithm H and Key C A is 
a private key of said certifying authority CA; whereby 

d) said user ^ration can compute said private key Key D M, 

Key4 = r 50 + ho = r 5 o + r C A+ H(M)Key C A 
and transmit said key Key 50 to said digital postage meter; whereby 

e) said digital postage meter can digitally sign said indicium with said key 
Key 5 oI a/fd whereby 



f) said verifying party can compute said digital postage meter public key 



yso 



a 



Key 50 *P = OMC 50 + H(M) Key CA *P = / 
(r DM +r CA )*P + H(M)Key CA *P / 
from knowledge of H, M, [P], said public key KeycA*P,/nd CERTdm- 

% / 

%A. A method for determining a public kefy Key D M*P of a digital postage 
meter with assurance that said key KeyoM has been certified by a group of one or 
more certifying authorities CA, said method comprising the steps of: 

a) scanning an indicium producedr>y said postage meter to obtain a certificate 
OMCdm for said postage meter, wherein; 

OMCdm = (rDM + sum(r^Ai))*P; and wherein 
r D M is a random integer known only to a part^generating said key Key D M and 
sum(rcAi) is a sum of a plurality p\ random/fntegers r C Ai, an ith one of said certifying 
stations generating an ith on^/of said rarjlao^^ 

b) scanning said indicium produced by said postage meter to obtain a 
message M said message M being published by a certifying station operated by one 
of said certifying authorities CA; 

c) computing a hash H(M) of said message M in accordance with a 
predetermined hashing function H; 

d) obtaining at least one public key cai*P corresponding to said one or more 
certifying authorities CA, an ith one of said authorities having an ith one of said keys 
KeycAi; and^ 

e) computing said user's public key Keyu*P as 

/ Keyu*P = CERTu [+] H(M)sum [+] (KeyCAi*P )= 
/ (r y + sum(r C Ai))*P [+] sum(H(M)Key C Ai)*P; wherein 




f) a binary operation [+] is defined on a/inite group [P] having a published 
particular point P; and 

g) K*p, is a second binary operation defined on said group [P],where K is an 

/ / / 

integer and p is a point in said group, such mat K*p, is a point in.said group 
computed by applying said operation [+] to H^<^giesof^aki^oint p, and computation 
of K from knowledge of the definition of said group [P], said point p, and K*p is hard. 



V j/^ ^25. A method digitally signing a postal indicium comprising the steps of: 
| a) generating a message m, said messagp m including indicia data; 

b) generating a digital signature with message recovery for said message m; 



and 



c) incorporating said digital signa)up/nUD said indicium 



26. A method as described in claim 25 wherein said generating step further 
comprises the steps of: 

a) generating a rando/fi integer rs, rs < n, where n is the order of a group [P] 
defined on an elliptic curve 

b) generating a integer K, 

K= K(rfP) 

where K(p) is a mapping of points in [P] onto the integers, and P is a particular 
published point imPJ; 
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c) generating e, 

e =\SKE K (nri) 

where SKE« is a symmetric key emcryption algorithm using key K; 



d) generating HWI), whi 
can be recovered from skid ind 




hashing function and M is a message which 



e) generating s = KeytyiH(M) + r s , 
where Key D w is the private key^of a postage meter which produced said indicium; 
and 



f) setting said digital signature for said message m equal to the pair (s,e). 



27. 



A method as described inyClaim 26 wherein M = (e,IAV), where IAV is 
anMdentity and attributes value for said postage meter. 

28. A method of verifying a digital signatur^6f a postal indicium comprising 
the steps of: 



a) recovering a message m from 



b) accepting said signature as valid if 





ignature of a postal indicium; and 



le m is internally consistent. 



29. A method a^/described in clatim28 wherein said recovering step further 
comprises the steps of, 

a) recovering a public key KeyoM*P for a postage meter which produced said 
indicium; 



a 
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b) obtaining the signature (s,e) of said indicium, where s = Key D MH(M) +r s 
e = SKEK(m), where SKEk is a symmetric key encryption algorithm using key K, m is 
indicia data, and M is a message recoverable from said indicium; 



c) obtaining M from said/indicium; 



d) generating 

s*P [-] H(M)Key DM *P = 

H(M)KeyqnfP [+1 *$7 
r s *P 

where [-] is the invepfee of [+]; 




H(M)KeyDM*P = 



e) generating 
= K(r s *P* 

where K(p) )& a mapping of points in [P] onto the integers, and P is a particular 
publishecj/point in [Pj; 

f) generating 
SKE' 1 K (e) 

where SKE* 1 ^s the inverse of SKE K . 

30. A method as described in claim 26 wherein M = (e,IAV), where IAV is an 
identity and attributes value for said postage meter. 



REMARKS 



Claims 1 - 13 are present in the subject application. By the present 
amendment claims 1, 8 and 9 have been canceled without prejudice and claims 14 - 



a 



